← Database

CVE-2005-1957

HIGH CVSS: 7.5 Published: 2005-06-12 Modified: 2026-06-16

Description

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the "view" action or (2) delete arbitrary files via the del action.

Affected Platforms

Adam Mmedici File Upload Manager

Weakness Type

CWE-287

References